yiff.tech

Issued by R3

About this certificate

This digital certificate with serial number 04:92:9a:18:d6:22:42:5f:7f:52:37:17:f3:e6:06:e1:d2:8a was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yiff.tech

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:92:9a:18:d6:22:42:5f:7f:52:37:17:f3:e6:06:e1:d2:8a
Serial Number (int): 398335199367123438299239238329818543149706
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:09:9a:f9:24:19:9e:74:c2:dc:9e:90:06:5e:ae:d5:77:ac:6f:7d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 49:08:6a:58:5b:ee:c1:ef:3f:20:56:5f:eb:ce:6a:de:b4:b5:6b:66
Fingerprint (sha256): d6:a7:d3:fe:35:0a:42:3a:04:f1:75:ab:a9:bf:61:9e:d1:b7:44:00:c9:ef:a8:15:c3:7b:21:da:a3:24:79:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yiff.tech

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yiff.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brainrasmussen.com
buyzer.realty.anja.today.miraclemorningapp.com
nymedicareprograms.com.thalasso4vip.com
obamacarebyzipcode.com
the-underdog.com.howtospeedrank.com
yiff.tech

Other certificates including the domain name yiff.tech

(limited to 100 certificates)
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
constructioncleanup.org
sni158499.cloudflaressl.com
yiff.tech
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
frankspeak.live
yiff.tech
raven.ntdll.net
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
www.mcs-service.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
cascadia.vc
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
revx2.llc
predator.yiff.tech
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
yiff.tech
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
shuswapsoundjourney.ca
collection.vc
sni158499.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
pioneer.bible
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com
sni41577.cloudflaressl.com

Certificate

The complete raw certificate details for yiff.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEmTCCA4GgAwIBAgISBJKaGNYiQl9/UjcX8+YG4dKKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMDQxMTIzNTFaFw0yNDAzMDMxMTIzNTBaMBQxEjAQBgNVBAMT
CXlpZmYudGVjaDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALho9es8
6czSAfsZRUJ2sjGbU13EOSaXbecoOdmetHhht4oPNkVQ/ta70BVDPD4oLWni+wIw
IXp1jaQQdtF1qehmw0tp4psr0sZaZgol8GWEWlt01pDSPb1MDDtCddH1hWSu9pdj
QId1ZyKzZvVhMvvZkT6dvooFtXt3ymJf7BYEb5ENlvmE0RobqWTwqTpUgFfxGfjj
mV7Cp02eUSjvrW1LXLrCB4MtSDGRnYELRSOwR/CLC829wuHxBLqR1hFEuHBf2w2k
3A+9Rc6ErH6+R8hP8msjjVH6k+qYu6BKH0eslLTTZj1yrxtrh2YsgnbTIO0DAb3J
likfXO3FUf743WUCAwEAAaOCAcUwggHBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
IQma+SQZnnTC3J6QBl6u1Xesb30wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v
nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s
ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgcAG
A1UdEQSBuDCBtYISYnJhaW5yYXNtdXNzZW4uY29tgi5idXl6ZXIucmVhbHR5LmFu
amEudG9kYXkubWlyYWNsZW1vcm5pbmdhcHAuY29tgidueW1lZGljYXJlcHJvZ3Jh
bXMuY29tLnRoYWxhc3NvNHZpcC5jb22CFm9iYW1hY2FyZWJ5emlwY29kZS5jb22C
I3RoZS11bmRlcmRvZy5jb20uaG93dG9zcGVlZHJhbmsuY29tggl5aWZmLnRlY2gw
EwYDVR0gBAwwCjAIBgZngQwBAgEwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAHzRwdHbnL5fp/hXJTwhKangsvj/cy8F3Qoz6Sc2PUdzPwV3
guIUqZ1skegvAk6ZlIhQF7PZzshO/R8JOOMpTl6EhKiscLb1dNqKdXrELKNMKKhD
1qx0oTU7qBxiVJD60u40XXtuG1WNzBa695AUlVLLt5X3JMNu93GhyxYoAsy4hRyg
pproe25wuNXb59Nd0ucXRmj3Hy0EB3lGc943LeXEuStm9ioXiV9rMs3nVZMd46tT
ztemZkHIdTo7pWQCe1FL7jyoOZFIFAwm5j673v9rDSKnJbC6NRt6bbpziIvsiEjw
QDAfI461vCFUQXCffHd/HjRaQuBhSdn58CiC374=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGj16zzpzNIB+xlFQnay
MZtTXcQ5Jpdt5yg52Z60eGG3ig82RVD+1rvQFUM8PigtaeL7AjAhenWNpBB20XWp
6GbDS2nimyvSxlpmCiXwZYRaW3TWkNI9vUwMO0J10fWFZK72l2NAh3VnIrNm9WEy
+9mRPp2+igW1e3fKYl/sFgRvkQ2W+YTRGhupZPCpOlSAV/EZ+OOZXsKnTZ5RKO+t
bUtcusIHgy1IMZGdgQtFI7BH8IsLzb3C4fEEupHWEUS4cF/bDaTcD71FzoSsfr5H
yE/yayONUfqT6pi7oEofR6yUtNNmPXKvG2uHZiyCdtMg7QMBvcmWKR9c7cVR/vjd
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398335199367123438299239238329818543149706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 11:23:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 11:23:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yiff.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23279606124867546870015009261009681379494183976559432597646828246504541387973185990040248737996217642892578007137317381845234059781204649456452019387155632856925048990954664308563934725056809408170794699380541379608315617545768733382547014848686116251760774055742714683577634743549243484886411665680505791258586574106110071066437943228315552201043376918458434404427824616951727056968068782001437262028452455841915720135089718380555494573884890504755747937639730578208616253960659510839379298062220865026181841399864374401599912887606936761327405656976681722717167359830216714524970615474739295723602648278652285410661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21099af924199e74c2dc9e90065eaed577ac6f7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (184 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brainrasmussen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyzer.realty.anja.today.miraclemorningapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nymedicareprograms.com.thalasso4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obamacarebyzipcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-underdog.com.howtospeedrank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yiff.tech'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007cd1c1d1db9cbe5fa7f857253c2129a9e0b2f8ff732f05dd0a33e927363d47733f057782e214a99d6c91e82f024e9994885017b3d9cec84efd1f0938e3294e5e8484a8ac70b6f574da8a757ac42ca34c28a843d6ac74a1353ba81c625490fad2ee345d7b6e1b558dcc16baf790149552cbb795f724c36ef771a1cb162802ccb8851ca0a69ae87b6e70b8d5dbe7d35dd2e7174668f71f2d0407794673de372de5c4b92b66f62a17895f6b32cde755931de3ab53ced7a66641c8753a3ba564027b514bee3ca8399148140c26e63ebbdeff6b0d22a725b0ba351b7a6dba73888bec8848f040301f238eb5bc215441709f7c777f1e345a42e06149d9f9f02882dfbe